Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
Reports Programs Subdomains Bug bounty programs Program Platform Bounty Assets Reports Subdomains MB Marriott Bug Bounty Program HackerOne Pays 59 – 5,220 PM PNI Media - Bug Bounty Bugcrowd Pays 59 – – ES European Space Agency (ESA) VDP Intigriti None 58 – – IB Infomaniak Bug Bounty program YesWeHack Pays 58 – 1,462 SG SIX Group HackerOne Pays 57 – – ZV Zebra VDP HackerOne None 55 – – KG Kinepolis Group Intigriti Pays 51 – – KM Klaviyo Managed Bug Bounty Bugcrowd Pays 51 – – AT Atlassian Bugcrowd Pays 50 – 77,384 KR Kruidvat Intigriti Pays 50 – – BC Booking.com HackerOne Pays 49 – – PO Port of Antwerp-Bruges Intigriti Pays 49 – 149 US USAA Bugcrowd Pays 49 – 1,604 HS HCL Software Inc. HackerOne None 48 – – MU Monash University Bug Bounty Bugcrowd Pays 48 – 10,680 CT Coupang Taiwan HackerOne Pays 47 – – SP Spotify HackerOne Pays 45 – – FU Flutter UK&I HackerOne Pays 44 – 3,708 OP Oportun HackerOne None 44 – – GP Global Payments HackerOne None 43 – – ME Mon Espace Santé (MES) YesWeHack Pays 43 – 217 PB Posti Bug Bounty Intigriti Pays 43 – – SE Semtech HackerOne None 43 – – ZI Zurich Insurance HackerOne None 43 – – AS Axel Springer National Media & Tech Intigriti Pays 41 – – FV Finnair Vulnerability Disclosure HackerOne None 41 – – SR Storebrand Responsible Disclosure Intigriti None 40 – – CS Cedars-Sinai HackerOne None 39 – 2,944 GS Goldman Sachs HackerOne Pays 39 – 4,651 TT The Trade Desk Bugcrowd Pays 38 – – AV Atolls Vulnerability Disclosure Program (VDP) Intigriti None 37 – – IP ICI PARIS XL Intigriti Pays 37 – – AA Assa Abloy Americas HackerOne None 36 – – KA Kaseya HackerOne None 36 – 7,776 YB Yahoo Bug Bounty Intigriti Pays 36 – – SV Shutterfly VDP HackerOne None 35 – – AC Arlo Cash Rewards Bugcrowd Pays 33 – 1,935 EG Expedia Group VDP HackerOne None 33 – 7,454 FU FDJ United (Online Betting and Gaming) - Bug Bounty program YesWeHack Pays 33 – – IN Intergamma Intigriti Pays 33 – – BV BorgWarner Vulnerability Disclosure Program Intigriti None 32 – – FV Flywire Vulnerability Disclose Program Intigriti None 32 – – EB ExpressVPN - Bug Bounty Program YesWeHack Pays 31 – 694 MB MediaMarktSaturn Bug Bounty Program YesWeHack Pays 31 – 1,609 OR Orbia Responsible Disclosure Intigriti None 31 – – RM Robinhood Markets HackerOne None 31 – 1,679 MO MongoDB HackerOne Pays 30 – 7,927 NE Netflix HackerOne Pays 30 – 220,682 QR QinetiQ Response HackerOne None 30 – – RG REA Group | realestate.com.au, realcommercial.com.au, property.com.au Bugcrowd Pays 30 – –
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.